Nice job! I have this same setup but broken down into two separate scripts. Does the job quite well.

@Snickasaurus Thanks

I have this modified version that goes install OS Updates & security updates with the added bonus if a restart is required a popup notifies the user.

Hope you find this useful

#!/bin/bash


### Environment Variables ###

# For OS updates use OSXUpd
# For Security updates use SecUpd

# Get any OS updates
getosupd=$(softwareupdate -l | grep OSXUpd | awk 'NR==1 {print $2}')

# Get any security updates
getsecupd=$(softwareupdate -l | grep SecUpd | awk 'NR==1 {print $2}')


MSG1='OS Software updates have been installed and require a restart. Please save your work and restart your machine'

MSG2='Security updates have been installed and require a restart. Please save your work and restart your machine'

### DO NOT MODIFY BELOW THIS LINE ###

# Install OS updates
if 
softwareupdate -i $getosupd | grep "restart"
then 

sudo /Library/Application Support/JAMF/bin/jamfHelper.app/Contents/MacOS/jamfHelper 
-windowType utility -title "WARNING" -description "$MSG1" -icon /System/Library/CoreServices/CoreTypes.bundle/Contents/Resources/AlertCautionIcon.icns -iconSize 96 -button1 "OK" -defaultButton 1

fi

# Install Security updates
if 
softwareupdate -i $getsecupd | grep "restart"
then 

sudo /Library/Application Support/JAMF/bin/jamfHelper.app/Contents/MacOS/jamfHelper 
-windowType utility -title "WARNING" -description "$MSG2" -icon /System/Library/CoreServices/CoreTypes.bundle/Contents/Resources/AlertCautionIcon.icns -iconSize 96 -button1 "OK" -defaultButton 1
fi

exit 0

Sorry - I am new to the JSS. Could you lay out in more detail how this was added to your policy?

Would I create the policy and then just copy and paste those commands into the File and Processes and an Execute Command?

Thank you!

@spif_spaceman You'd create a Script in your JSS based on @tkimpton's post, then create a Policy with a Scripts payload that executes that script.

@spif_spaceman

Go to the settings and create this as a script and then run that script as a policy.

Wow thank you guys for the quick responses!!!

I'm also new to this world. Anyone got any ideas how i could run this when the App store requests credentials for the account? User doesn't know them, but I do.

You could deploy Using Apple Volume Purchase Program, the Apps could then be assigned to device and no Apple ID required...

Worth a look.. https://volume.itunes.apple.com/gb/store

@TKimpton I like your script and it worked on all two of the devices we tested it on. I needed to reimage the devices, and afterwards flushed the logs to allow the OS update to occur again. Now it is saying the OS update completed, but the OS never updates... even after 2 hrs. Thoughts or ideas JAMF crew?

Print out of log:
Executing Policy OS update Script
Running script OS Update Script...
Script exit code: 0
Script result:

@tkimpton @Snickasaurus Hi folks! I'm thinking the above script is broken for Sierra? Yes? Its not doing anything for us. And it's setup as recommended above. Thoughts?

Yep, it would not work for Sierra, when they changed the package names. You would need to go into the script and edit the environmental variables part

Environment Variables

For OS updates use OSXUpd

For Security updates use SecUpd

How would I go about installing these updates but postponing the reboot until a specific time?

Anyone got this working for Mojave ? nothing seems to happen

is there a way to set a restart timer or count down?

Guys, If I want to use this script on Catalina and BigSur OS versions, should I need to change something on the variables or the executed commands syntax?